Re: Confused about Authorization Services with multiple execution

FROM : Tobias Peciva
DATE : Sun Nov 21 21:54:15 2004

Just as a FYI, there is a known bug/feature in Authorization Services,
where some operations require authentication each time, even if you
performed the same operation a second earlier. In my mind, this is a
serious bug, because if the user authenticates herself for the first
operation, then cancels the authentication for the second one, the
system is left in an intermediate state that may or may not be usable.

Radar 3698415 filed against this behavior.

Cheers,
Tobias Peciva
Pharos Systems


On 19/11/2004, at 3:44 AM, Dale Gillard wrote:

> I'm using the open source Authorization.framework and want to execute
> the ncuti tool multiple times to incrementally create a complete
> Network Location. But it requires the user to authenticate each time
> that runToolAuthenticated: args: is called. This isn't appropriate for
> my situation as each execution simply creates a part of the Network
> Location.
>
> Having read the Authorization Services documentation I'm confused as
> to the best way to do this.
>
> The Authorization.framework  uses
> AuthorizationExecuteWithPrivileges(). But this seems to A Bad Thing.
> The alternatives are to
> * create a helper tool and run it as root (but ncutil is the helper
> tool so it should be ran as root?)
> * use the AuthorizationMakeExternalForm() and
> AuthorizationCreateFromExternalForm() methods to pass the
> Authorization Reference from my app to ncutil (this doesn't seem to
> work)
>
> I'd appreciate any advice based on experience.